This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer File: Pem-PEevueCl_DA78thKc_IIL6w.cer (raw, json) Hash identifier: eFoTyElKSIrpvyju3At7DEg4aZxIF0TWU8/aZ5YYx4o= Subject key identifier: 3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB4004FFB2AE667E6DE683B934E63F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.220.179.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:40:04:ff:b2:ae:66:7e:6d:e6:83:b9:34:e6:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bc:98:47:b6:3e:b1:2c:7a:76:da:47:18:bf: 7d:ce:29:b4:2e:25:2e:90:99:2d:d6:ef:91:b7:97: 30:3c:eb:94:7b:9f:b0:97:ef:07:b8:54:bc:7e:54: d6:de:78:b0:22:d3:ae:f0:46:a1:58:96:b4:48:9c: 06:ed:8c:17:46:65:1a:0c:d6:d8:2a:de:f3:d8:3c: c4:dd:c1:c0:24:ac:0e:39:db:64:9e:6e:28:0c:7d: 1d:80:19:74:d4:2d:08:9b:ea:8f:c5:91:c1:c5:e3: db:9b:0a:bd:72:db:fe:d5:c1:b2:96:57:56:c7:fd: cb:38:03:87:c3:08:91:c1:7a:e0:6c:2b:80:10:e6: f0:c8:fc:7d:6c:de:78:3b:45:6d:9d:f1:cd:00:33: ae:ee:6f:b5:4a:11:d7:18:db:af:83:2a:c5:d0:85: a3:21:67:9a:da:1e:eb:37:55:98:72:c7:0f:df:6b: bd:6e:e7:f1:16:66:c0:d7:f7:da:f8:68:9f:93:5f: b3:f6:71:ef:d9:20:71:84:11:1b:81:2e:7a:0f:5c: 64:93:73:3c:ba:76:03:d4:f9:5c:06:ce:f4:81:98: 40:0d:f1:d6:3b:92:72:90:b4:77:cb:ec:7b:b9:92: a1:4d:80:18:ef:5b:f4:c0:2f:56:7d:b4:2b:71:d8: 38:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.179.0/24 Signature Algorithm: sha256WithRSAEncryption 76:bb:b7:17:66:41:26:bb:60:ac:56:78:4d:57:93:04:ae:fb: 28:73:53:98:8a:d9:4a:75:84:d9:a0:1d:8a:be:d6:ae:56:8b: e9:69:81:9f:65:2b:c3:18:e1:00:b8:35:f1:7e:eb:1c:a7:ea: 6c:49:7c:b4:cf:6b:e1:16:85:06:92:84:d8:21:38:62:9b:d4: 03:4a:9b:68:32:67:8a:43:0b:3d:ec:c8:29:8f:a0:20:36:1c: 6d:0a:0a:45:3b:d3:a5:3b:bf:93:89:b6:cb:0b:14:33:bb:d9: 62:40:1c:3a:7d:76:02:ed:3e:c3:d6:ae:c0:2e:76:cc:ba:04: 56:a0:77:72:cc:62:1f:2e:eb:50:ba:41:c0:a8:ef:b4:1e:f1: 13:0d:0a:1c:47:b2:49:1d:d3:bd:32:64:4b:a5:5b:57:97:72: da:0f:f4:a6:0f:66:9b:bb:bd:54:f1:78:77:34:a1:b1:29:ab: b2:8a:70:0c:01:de:7d:18:6a:68:97:57:f8:23:db:7d:74:60: 7a:2b:fe:9e:dc:0f:a0:7f:04:57:2f:06:e3:2d:9d:06:d6:8e: 51:d4:50:7b:c9:f1:80:50:03:0c:49:6d:0f:a3:a4:9f:12:a1: 61:d0:84:25:c9:3d:b2:30:ad:35:03:dd:47:a5:0a:72:0a:a9: dc:6f:18:6d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt260AE/7KuZn5t5oO5NOY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGU5YmUzYzQ3YWZiOWUwYTVmYzMwM2JmMmQ4NGE3M2YyMDgyZmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbyYR7Y+sSx6dtpHGL99zim0LiUu kJkt1u+Rt5cwPOuUe5+wl+8HuFS8flTW3niwItOu8EahWJa0SJwG7YwXRmUaDNbY Kt7z2DzE3cHAJKwOOdtknm4oDH0dgBl01C0Im+qPxZHBxePbmwq9ctv+1cGylldW x/3LOAOHwwiRwXrgbCuAEObwyPx9bN54O0VtnfHNADOu7m+1ShHXGNuvgyrF0IWj IWea2h7rN1WYcscP32u9bufxFmbA1/fa+Gifk1+z9nHv2SBxhBEbgS56D1xkk3M8 unYD1PlcBs70gZhADfHWO5JykLR3y+x7uZKhTYAY71v0wC9WfbQrcdg4wwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFD3pvjxHr7ngpfwwO/LYSnPyCC+sMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkL2VmNzZh Ni1jNGUxLTQyN2YtOTczYi0yYzFjMjkwMTQ1NDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvZWY3NmE2 LWM0ZTEtNDI3Zi05NzNiLTJjMWMyOTAxNDU0OC8xL1BlbS1QRWV2dWVDbF9EQTc4 dGhLY19JSUw2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9yzMA0GCSqGSIb3DQEBCwUAA4IBAQB2u7cX ZkEmu2CsVnhNV5MErvsoc1OYitlKdYTZoB2KvtauVovpaYGfZSvDGOEAuDXxfusc p+psSXy0z2vhFoUGkoTYIThim9QDSptoMmeKQws97Mgpj6AgNhxtCgpFO9OlO7+T ibbLCxQzu9liQBw6fXYC7T7D1q7ALnbMugRWoHdyzGIfLutQukHAqO+0HvETDQoc R7JJHdO9MmRLpVtXl3LaD/SmD2abu71U8Xh3NKGxKauyinAMAd59GGpol1f4I9t9 dGB6K/6e3A+gfwRXLwbjLZ0G1o5R1FB7yfGAUAMMSW0Po6SfEqFh0IQlyT2yMK01 A91HpQpyCqncbxht -----END CERTIFICATE-----Generated at Mon Jan 26 18:16:45 2026 by rpki-client